Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
File: FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft (raw, json)
Hash identifier: Jl1MXulkSK6L0nLBvcj4Xkq3wNcDHYJQAyvIzQoE8vY=
Subject key identifier: 8F:B1:25:FD:3D:24:57:09:05:D8:7C:0B:F4:57:D8:B6:A4:15:55:5A
Authority key identifier: 14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
Certificate issuer: /CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Certificate serial: 01991988F9029677F2B960A02A87555169E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
Manifest number: 0C73
Signing time: Fri 05 Sep 2025 11:00:30 +0000
Manifest this update: Fri 05 Sep 2025 11:00:30 +0000
Manifest next update: Sat 06 Sep 2025 11:00:30 +0000
Files and hashes: 1: FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl (hash: gIuRu8nPzJA4ehQ0Vz2reBLNOjQAldJhvZSur6efiKs=)
2: XnnmqXJoOR0rO9VDsOL9RjMpoEc.roa (hash: LgD69e+nouQ5z7eZNAgfyUxJCnIL4Pp/DimPZswYsNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:19:88:f9:02:96:77:f2:b9:60:a0:2a:87:55:51:69:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d6927b5a75b7669b1fe2ac8fdc7b61377c9101
Validity
Not Before: Sep 5 11:00:30 2025 GMT
Not After : Sep 6 11:00:30 2025 GMT
Subject: CN=8fb125fd3d24570905d87c0bf457d8b6a415555a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:88:85:ec:cf:42:2d:f7:54:2c:55:43:6a:8f:
39:ef:1a:3e:60:cd:dd:b5:8a:15:0c:ce:f8:df:e8:
85:e5:dd:02:12:3e:d5:b6:66:96:c9:9c:06:7e:fd:
61:b1:2b:6f:fc:be:9b:2e:09:fb:da:14:93:4d:c4:
0a:8d:fd:a8:fe:a9:4d:ba:63:95:e5:48:6f:7b:4f:
f1:f2:1f:51:c1:dc:6c:e5:10:be:18:74:e5:59:47:
8d:31:6f:f5:94:00:d3:c4:e2:b4:64:6c:df:bc:cd:
9e:84:7c:f5:fd:9d:30:f2:f5:be:36:36:04:a2:d0:
fd:82:02:d1:ad:2d:94:fd:41:4d:ba:81:dc:db:0c:
4d:d0:85:be:8b:4f:b5:8c:d8:e4:d6:4d:70:cc:7e:
a3:89:91:da:31:a4:87:f3:76:8e:8b:c2:50:c4:4c:
0c:c6:e0:07:9f:06:68:60:98:73:b4:eb:a2:09:5f:
c1:5f:b4:5d:21:1d:bd:fb:06:c1:0f:2a:a7:cc:39:
8b:a4:ea:aa:51:e1:9e:a6:70:ad:aa:5b:9f:5d:30:
83:d2:82:72:c2:59:b3:ce:85:70:ac:1a:f5:39:5f:
98:79:3a:44:f2:3f:15:43:6d:d1:af:65:13:90:7e:
f8:ec:a2:20:ba:5f:f5:82:19:bd:c4:88:c2:6c:17:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B1:25:FD:3D:24:57:09:05:D8:7C:0B:F4:57:D8:B6:A4:15:55:5A
X509v3 Authority Key Identifier:
keyid:14:D6:92:7B:5A:75:B7:66:9B:1F:E2:AC:8F:DC:7B:61:37:7C:91:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNaSe1p1t2abH-Ksj9x7YTd8kQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a3d85e-4335-425a-b0f6-8f54ab134d83/1/FNaSe1p1t2abH-Ksj9x7YTd8kQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c0:d8:b6:4f:e3:cb:98:2e:49:11:1e:69:81:14:bc:5d:75:
62:be:ad:65:10:88:76:dd:84:b9:0f:c8:38:e3:30:12:f6:c1:
41:8f:26:a5:af:c9:89:e5:e3:f1:b8:e1:ae:f2:87:e1:3d:2d:
db:d2:7f:50:d6:ed:f7:81:72:1b:ee:e5:a5:02:17:65:3d:38:
5a:59:17:8e:13:f4:d4:68:32:f1:4f:6d:35:25:f2:23:44:2f:
d7:83:68:a4:75:f3:2b:b8:05:cd:46:62:ca:ca:24:a2:08:ad:
77:3c:ac:bd:05:38:72:93:59:03:8d:f5:a7:9d:48:62:75:f2:
e0:a7:41:47:f3:6e:36:38:f9:9d:76:17:d9:31:33:a1:c5:41:
0c:92:68:fa:c9:b6:24:7e:28:11:72:de:2f:cd:5f:7b:1b:00:
41:b9:7d:d2:62:f7:0b:ca:c3:49:da:02:7a:94:fe:50:4a:7a:
ed:28:e7:df:14:31:87:06:47:16:d4:c4:e9:41:74:5d:38:1f:
4c:7e:9a:63:70:03:68:08:1f:d7:80:d0:f6:3a:95:76:dd:b8:
d5:8d:5a:95:32:ad:92:a4:a5:a3:ec:1e:7c:c5:47:1f:dd:cf:
a6:b8:3b:92:7a:f6:f5:0a:8e:e4:58:82:93:82:a2:06:72:a2:
a1:e1:2c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 18:56:19 2025 by rpki-client